Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to lead hands‑on static application security testing (SAST) triage. You will work remotely, collaborating with engineering teams to ensure vulnerabilities are accurately identified, documented, and remediated.

Key responsibilities

• Perform daily SAST triage, reviewing findings and determining their validity.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across production codebases.
• Document disposition decisions with audit‑traceable evidence in regulated environments.
• Fine‑tune static analysis tools to reduce false‑positive rates across the product portfolio.
• Partner with developers to validate findings and drive timely remediation.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a strong security focus.
• Proven track record of hands‑on SAST triage rather than just tool integration.
• Excellent written and spoken English.

Required skills

• SAST triage and static analysis.
• Source‑to‑sink data‑flow analysis.
• Secure code review.
• Experience with Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation of vulnerability dispositions.

What we offer

• 100% remote work from any location.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, career growth, and a multicultural team of top‑tier talent.